Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/Ec2GT2JZyZtps7DV9tmWZnrcV8c.roa
File: Ec2GT2JZyZtps7DV9tmWZnrcV8c.roa (raw, json)
Hash identifier: yjv/T1jwPBe75CndSdJgtlJBsFQwDojYWOcb3BF5b80=
Subject key identifier: 11:CD:86:4F:62:59:C9:9B:69:B3:B0:D5:F6:D9:96:66:7A:DC:57:C7
Certificate issuer: /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial: 01831811313AB3041905EE45576AFFAF6BCA
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/Ec2GT2JZyZtps7DV9tmWZnrcV8c.roa
Signing time: Wed 07 Sep 2022 13:08:43 +0000
ROA not before: Wed 07 Sep 2022 13:08:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49066
IP address blocks: 95.215.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:11:31:3a:b3:04:19:05:ee:45:57:6a:ff:af:6b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Validity
Not Before: Sep 7 13:08:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11cd864f6259c99b69b3b0d5f6d996667adc57c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:93:75:c8:77:b8:fa:fb:09:96:be:2c:44:
fd:29:85:67:a0:5b:d8:e7:c4:55:71:bf:12:1c:b9:
1c:22:76:55:56:ba:66:44:a2:73:55:d6:43:56:5c:
aa:ba:8b:a5:f8:50:07:73:6f:e9:d1:5f:dd:2a:ee:
46:ba:3c:e7:23:ad:8c:8d:ab:4c:54:91:02:e2:51:
0f:59:29:2f:39:4b:d5:f5:e9:a9:ae:b0:d3:82:85:
4d:aa:af:c7:c1:c8:1b:18:57:3f:b5:50:c3:d2:07:
ec:ac:34:28:5c:ca:95:3f:ff:30:dc:54:96:08:3f:
6e:77:bf:21:ee:a7:42:d2:3f:d4:3d:61:fc:b8:59:
eb:ca:4c:c4:97:64:63:b3:b3:00:50:81:22:2e:63:
1b:47:0e:ad:7f:8d:12:f9:6d:93:bd:66:cc:7a:da:
25:0e:6e:1f:5f:35:11:3c:f0:55:a3:80:e2:7a:07:
23:90:fa:72:5c:42:9f:2a:8b:b4:26:82:ef:85:f1:
98:8b:f1:fc:9b:fd:b5:d8:fa:63:7d:46:ec:c2:91:
9c:2b:dd:70:7c:94:06:b6:50:e0:c4:fa:da:4c:f2:
55:f7:7c:32:88:ea:5e:d0:13:67:65:5e:bf:f8:e4:
54:0c:e4:36:14:60:94:ea:f9:99:20:ee:c5:f0:57:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CD:86:4F:62:59:C9:9B:69:B3:B0:D5:F6:D9:96:66:7A:DC:57:C7
X509v3 Authority Key Identifier:
keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/Ec2GT2JZyZtps7DV9tmWZnrcV8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.136.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:7b:75:ed:b0:84:d2:58:91:14:45:65:39:45:86:df:a8:6e:
16:6c:21:0a:37:47:7d:91:03:ca:43:90:fb:7a:b0:5e:07:68:
92:af:bc:ed:b5:af:a8:2c:7d:50:6c:b0:98:cb:ab:3b:c0:5b:
2d:11:5a:8a:16:22:e4:55:c0:d9:13:f1:32:7a:85:0e:3a:20:
14:50:cb:f3:88:02:aa:5d:f1:11:e2:6d:3a:94:d0:1c:28:bf:
05:eb:d4:ea:43:ae:4c:6e:3b:43:53:97:be:d3:45:30:ed:e1:
7d:0b:fb:d8:6b:bd:cf:12:e2:2d:23:89:09:44:42:d2:7c:90:
68:39:2d:a7:22:7f:ee:be:bd:bf:81:07:50:0a:bd:f0:ca:67:
b5:14:cc:7b:5c:c7:05:df:87:37:61:42:01:10:62:ca:00:0d:
a3:cd:bc:6a:c0:2b:83:b3:03:64:85:8c:4e:8f:19:f0:6c:ca:
25:79:d9:16:f7:18:2c:f2:5a:f1:6d:84:2f:13:cf:5f:fa:62:
df:c0:f4:f7:7d:9b:e8:4b:24:5f:7c:79:c6:02:3a:d5:12:53:
67:7b:b5:a0:72:ee:7c:61:5a:b0:f8:d9:ef:30:93:76:af:ae:
0f:0e:6e:32:4a:ab:e7:9b:10:2f:79:c1:df:71:79:71:3a:47:
4e:9e:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:53 2023 by rpki-client on console-fra.rpki-client.org